CVE-2011-2505
medium · 6.4libraries/auth/swekey/swekey.auth.lib.php in the Swekey authentication feature in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 assigns values to arbitrary parameters referenced in the query string, which allows remote attackers to modify the SESSION superglobal array via a crafted request, related to a "remote variable manipulation vulnerability."
6.4
CVSS
12.9%
EPSS (exploit prob.)
96th
EPSS percentile
2011-07-14
Published
AV:N/AC:L/Au:N/C:N/I:P/A:P
Weaknesses
CWE-94
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| phpmyadmin | phpmyadmin | 3.0.0 |
| phpmyadmin | phpmyadmin | 3.0.0 |
| phpmyadmin | phpmyadmin | 3.0.0 |
| phpmyadmin | phpmyadmin | 3.0.0 |
| phpmyadmin | phpmyadmin | 3.0.1 |
| phpmyadmin | phpmyadmin | 3.0.1 |
| phpmyadmin | phpmyadmin | 3.0.1.1 |
| phpmyadmin | phpmyadmin | 3.1.0 |
| phpmyadmin | phpmyadmin | 3.1.0 |
| phpmyadmin | phpmyadmin | 3.1.1 |
| phpmyadmin | phpmyadmin | 3.1.1 |
| phpmyadmin | phpmyadmin | 3.1.2 |
| phpmyadmin | phpmyadmin | 3.1.2 |
| phpmyadmin | phpmyadmin | 3.1.3 |
| phpmyadmin | phpmyadmin | 3.1.3 |
| phpmyadmin | phpmyadmin | 3.1.3.1 |
| phpmyadmin | phpmyadmin | 3.1.3.2 |
| phpmyadmin | phpmyadmin | 3.1.4 |
| phpmyadmin | phpmyadmin | 3.1.4 |
| phpmyadmin | phpmyadmin | 3.1.5 |
| phpmyadmin | phpmyadmin | 3.1.5 |
| phpmyadmin | phpmyadmin | 3.2.0 |
| phpmyadmin | phpmyadmin | 3.2.0 |
| phpmyadmin | phpmyadmin | 3.2.0 |
| phpmyadmin | phpmyadmin | 3.2.1 |
| phpmyadmin | phpmyadmin | 3.2.1 |
| phpmyadmin | phpmyadmin | 3.2.2 |
| phpmyadmin | phpmyadmin | 3.2.2 |
| phpmyadmin | phpmyadmin | 3.3.0.0 |
| phpmyadmin | phpmyadmin | 3.3.1.0 |
| phpmyadmin | phpmyadmin | 3.3.2.0 |
| phpmyadmin | phpmyadmin | 3.3.3.0 |
| phpmyadmin | phpmyadmin | 3.3.4.0 |
| phpmyadmin | phpmyadmin | 3.3.5.0 |
| phpmyadmin | phpmyadmin | 3.3.5.1 |
| phpmyadmin | phpmyadmin | 3.3.6 |
| phpmyadmin | phpmyadmin | 3.3.7 |
| phpmyadmin | phpmyadmin | 3.3.8 |
| phpmyadmin | phpmyadmin | 3.3.8.1 |
| phpmyadmin | phpmyadmin | 3.3.9.0 |
Check a specific version with /api/v1/cve/match.
References
- http://ha.xxor.se/2011/07/phpmyadmin-3x-multiple-remote-code.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062719.html
- http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=7ebd958b2bf59f96fecd5b3322bdbd0b244a7967
- http://secunia.com/advisories/45139
- http://secunia.com/advisories/45292
- http://secunia.com/advisories/45315
- http://securityreason.com/securityalert/8306
- http://typo3.org/teams/security/security-bulletins/typo3-sa-2011-008/
- http://www.debian.org/security/2011/dsa-2286
- http://www.exploit-db.com/exploits/17514/
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:124
- http://www.openwall.com/lists/oss-security/2011/06/28/2
- http://www.openwall.com/lists/oss-security/2011/06/28/6
- http://www.openwall.com/lists/oss-security/2011/06/28/8
- http://www.openwall.com/lists/oss-security/2011/06/29/11
- http://www.osvdb.org/73611
- http://www.phpmyadmin.net/home_page/security/PMASA-2011-5.php
- http://www.securityfocus.com/archive/1/518804/100/0/threaded
- http://www.xxor.se/advisories/phpMyAdmin_3.x_Multiple_Remote_Code_Executions.txt
- http://ha.xxor.se/2011/07/phpmyadmin-3x-multiple-remote-code.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062719.html
- http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=7ebd958b2bf59f96fecd5b3322bdbd0b244a7967
- http://secunia.com/advisories/45139
- http://secunia.com/advisories/45292
- http://secunia.com/advisories/45315
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2011-2505